Vulnerabilities · 189 days ago

March Patch Tuesday Fixes Critical Microsoft Cloud Vulnerabilities

Microsoft released March Patch Tuesday addressing 82 CVEs. The update covers a Critical RCE in Devices Pricing Program (CVE-2026-21536) and a Critical elevation-of-privilege in Payment Orchestrator Service (CVE-2026-26125).

CVE-2026-21536

NVD KEV

CVSS 9.8 CRITICAL: microsoft Devices Pricing Program Remote Code Execution Vulnerability EPSS 2% (72nd percentile).

CVE-2026-26125

NVD KEV

CVSS 8.6 HIGH: payment Orchestrator Service Elevation of Privilege Vulnerability EPSS 1% (63rd percentile), up from 0.10%.

Timeline

Sources

1 source covering this story

CrowdStrike Mar 10
March 2026 Patch Tuesday: Updates and Analysis | CrowdStrike
Microsoft's March 2026 Patch Tuesday addresses 82 CVEs, featuring eight Critical vulnerabilities.

Entities

CVE-2026-21536
CVE-2026-26125

Vendor digest: Microsoft

Part of the PlainSec briefing for 2026-03-10

Editions

Briefing for 2026-03-10

Vulnerabilities · 189 days agoMarch Patch Tuesday Fixes Critical Microsoft Cloud VulnerabilitiesMicrosoft released March Patch Tuesday addressing 82 CVEs. The update covers a Critical RCE in Devices Pricing Program (CVE-2026-21536) and a Critical elevation-of-privilege in Payment Orchestrator Service (CVE-2026-26125).